Previous Topic: Front-End Web Server ConfigurationNext Topic: CA SSO Agent for SAP Release Notes


NPSEncrypt and NPSVersion Tools

This section contains the following topics:

NPSEncrypt Tool

NPSVersion Tool

NPSEncrypt Tool

Sometimes secret values must be stored in a configuration file. For security purposes, you might want to encrypt and store the encrypted form of these secret values. Use the NPSEncrypt tool. When a setting allows encrypted values to be used, this tool decrypts it before use. If the setting is not encrypted, the value entered is used.

The NPSEncrypt utility takes plain text from the command line, encrypts it, and prints the result on the screen. The resulting encrypted text can be cut and pasted wherever it is needed.

A product that allows an encrypted value, automatically decrypts it when needed.

Run the NPSEncrypt utility from the directory where it exists. The default location of the utility is as follows:

<SAP_agent_install_folder>\tools\

To encrypt a value, use the command prompt and type the NPSEncrypt command followed by a space and the text to be encrypted:

C:\Program Files\CA\webasagent\sapwebas\tools>npsencrypt secret
[NPSEncrypt Version 12.0.0000.244 - NPSEncrypt Revision 12.0.0000.244]
[NDSEnc-B]9Avy5I7DdZvyKMQUEyCmkA==

In this case, the encrypted form of secret is:

[NDSEnc-B]9Avy5I7DdZvyKMQUEyCmkA==

When you copy and paste, grab the entire line, including [NDSEnc-].

NPSEncrypt encrypts the same text to many different cipher text values. Use any of the values, for example:

C:\Program Files\CA\webasagent\sapwebas\tools>npsencrypt secret
[NPSEncrypt Version 12.0.0000.244 - NPSEncrypt Revision 12.0.0000.244]
[NDSEnc-B]+gSD4iNxxr2dApU2LeaVNg==
C:\Program Files\CA\webasagent\sapwebas\tools>npsencrypt secret
[NPSEncrypt Version 12.0.0000.244 - NPSEncrypt Revision 12.0.0000.244]
[NDSEnc-C]/QFL4W7I7k0iWpANyne0zA==
C:\Program Files\CA\webasagent\sapwebas\tools>npsencrypt secret
[NPSEncrypt Version 12.0.0000.244 - NPSEncrypt Revision 12.0.0000.244]
[NDSEnc-C]Af0T4bgeF96of3IA6PuOng==
C:\Program Files\CA\webasagent\sapwebas\tools>npsencrypt secret
[NPSEncrypt Version 12.0.0000.244 - NPSEncrypt Revision 12.0.0000.244]
[NDSEnc-C]Af0T4bgeF96of3IA6PuOng==
C:\Program Files\CA\webasagent\sapwebas\tools>npsencrypt secret
[NPSEncrypt Version 12.0.0000.244 - NPSEncrypt Revision 12.0.0000.244]
[NDSEnc-B]BPnb4AN1P28PdwnSbqgfKw==
C:\Program Files\CA\webasagent\sapwebas\tools>npsencrypt secret
[NPSEncrypt Version 12.0.0000.244 - NPSEncrypt Revision 12.0.0000.244]
[NDSEnc-B]BPnb4AN1P28PdwnSbqgfKw==

The syntax for using the command is:

NPSENCRYPT.exe [Text]
Text

Specifies the text to be encrypted.

Examples of possible usage for the tool follow:

  1. Run NPSEncrypt without any parameter using the following command:
    NPSEncrypt.exe
    [NPSEncrypt Version 12.0.0000.129 - NPSEncrypt Revision 12.0.0000.129]
    
  2. Run NPSEncrypt with the "text" to be encrypted using the following command:
    NPSEncrypt.exe <text >
    

    An RC2 algorithm encrypted value such as the following sample appears:

    [NDSEnc-A]gg7ljFtRbwb9ss
    

For Unix and Linux Platforms, the name of the tool is NPSEncrypt.

NPSVersion Tool

Use the NPSVersion tool to extract version information from many CA products. To use this command-line tool, type NPSVersion, a space, and the name of the executable whose version information you want, for example:

C:\Program Files\CA\webasagent\sapwebas\tools>npsversion NPSEncrypt.exe
[NPSVersion Version 12.0.0000.244 - NPSVersion Revision 12.0.0000.244]
NPSEncrypt.exe - Component: NPSEncrypt V12.0.0000.244 (Sep 28 2009 17:37:05)
NPSEncrypt.exe       -   Package: NPSEncrypt V12.0.0000.244

C:\Program Files\CA\webasagent\sapwebas\tools>

Use the NPSVersion tool on one platform to extract information for a product built for any other platform. The information displayed might differ in format and content than the previous sample, but the relevant lines when discussing any issues with Support are Package and Component. Each line has a version number.Package refers to the version of the Product.

Component refers to the part of the product that is enclosed within this specific file. The version number can be larger than the Package version. One of more bugs can have been repaired for the component or minor enhancements added to the component that did not require a package to be rebuilt or renumbered.